CVE-2026-90202

None

CVSS

—

EPSS

0.2%

Published

Sep 17, 2026

CISA due date

—

The record

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers _base_release_memory_pools() unconditionally frees every ioc->pcie_sg_lookup[] entry, including ones the setup loop never allocated after a partial failure, causing a "bad dma" warning on debug kernels or a NULL pointer dereference otherwise.

Affected packages

Ecosystem	Package	Introduced	Fixed